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DETAILED ACTION 

1. This action is amendment RCE received August 5, 2009. Claims 1-4, 6-16 and 
18-30 are pending examination. 

Claim Rejections - 35 USC § 103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the pnor art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

2. Claims 1-4, 6-16 and 18-30 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Pfwitzner, U.S. Patent No. 7,506,069 in view of Amin et al., U.S. 
Patent No. 6,854,014 (referred to hereafter as Amin). 

As to claim 1 , Pfwitzner teaches a method of providing access to services across 
a computer network, comprising the step of: 

generating an access request by a requesting network access device through 
which an end user device can obtain access to network resources, said access request 
comprising a requesting network access device description "computing environment 
information" and a plurality of service requests indicative of computer services "meeting" 
for which the network device requests provisioning (see col. 10 lines 36-41, lines 44-53, 
end user sends a request to access a meeting using a URL); 

wherein the requesting network access device description includes one or more 
of: a requesting network access device vendor, a requesting network access device 
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type, a requesting networl< access device version (see col. 11 lines 28-37, the request 
includes device information such as the type of device); and 

foHA/arding said access request for authentication and authorization (see col. 10 
lines 56-col. 1 1 lines 3, the access request is forwarded to the server that is hosting the 
meeting). 

Pfwitzner does not explicitly teach that the access request is an authentication, 
authorization and access request. However, Amin teaches a system and method for 
generating authentication, authorization and access requests to obtain access to 
network resources (see Amin col. 14 lines 39-lines 66 and col. 18 lines 25-54). 

It would have been obvious for one of the ordinary skill in the art at the time of 
the invention to implement the use of aaa requests in Pfwitzner's system and method as 
taught by Amin. Motivation to do so comes from the knowledge well known in the art 
that using AAA requests is very widely and commonly used as admitted by the applicant 
(applicant's response pages 8-9) and that using AAA requests would authenticate the 
identity of the user before granting access to network resources which would make the 
system and method more secure. 

As to claim 6, Pfwitzner teaches a method according to Claim 1 in which the 
service requests include a request for a particular service level (see col. 14 lines 38-53, 
user may have different access levels based on whether user is author or not). 

As to claim 7, Pfwitzner teaches a method according to Claim 1 in which a policy 
is applied to the access request to determine whether access will be allowed, and if so 
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for what services (see col. 14 lines 38-53, identity of user is verified to determine 
whether access is allowed). 

As to claim 8, Pfwitzner teaches a method according to Claim 1 in which networl< 
resources are provisioned in dependence upon the access request (see col. 14 lines 
38-53). 

As to claim 9, Amin teaches a method according to Claim 1 in which the steps of 
receiving and applying are performed by an access-control server or an Authentication, 
Authorization and Audit (AAA) server (see col. 14 lines 38-53, redirection server 
performs authentication). 

As to claim 10, Pfwitzner teaches a method according to Claim 9 in which the 
access-control server uses the access request to select among multiple services that 
are specified for a particular device (see col. 13 lines 13-45, different versions and 
formats are selected based n the device type and user identity). 

As to claim 1 1 , Pfwitzner teaches a device for providing access to services 
across a computer network, comprising: 

Means for generating an access request by a requesting network access device 
through which an end user device can obtain access to network resources, said access 
request comprising a requesting network access device description "computing 
environment information" and a plurality of service requests indicative of computer 
services "meeting" for which the network device requests provisioning (see col. 10 lines 
36-41 , lines 44-53, end user sends a request to access a meeting using a URL); 
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wherein tlie requesting networl< access device description includes one or more 
of: a requesting networ[< access device vendor, a requesting networl< access device 
type, a requesting network access device version (see col. 1 1 lines 28-37, the request 
includes device information such as the type of device); and 

means for forwarding said access request for authentication and authorization 
(see col. 1 0 lines 56-col. 1 1 lines 3, the access request is forwarded to the server that is 
hosting the meeting). 

Pfwitzner does not explicitly teach that the access request is an authentication, 
authorization and access request. However, Amin teaches a system and method for 
generating authentication, authorization and access requests to obtain access to 
network resources (see Amin col. 14 lines 39-lines 66 and col. 18 lines 25-54). 

It would have been obvious for one of the ordinary skill in the art at the time of 
the invention to implement the use of aaa requests in Pfwitzner's system and method as 
taught by Amin. Motivation to do so comes from the knowledge well known in the art 
that using AAA requests is very widely and commonly used as admitted by the applicant 
(applicant's response pages 8-9) and that using AAA requests would authenticate the 
identity of the user before granting access to network resources which would make the 
system and method more secure. 

As to claim 13, Pfwitzner teaches a device for providing access to services 
across a computer network a network interface, comprising computer storage medium 
executing code to perform the steps comprising: 
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generating an access request by a requesting network access device tlirougli 
wliicli an end user device can obtain access to networl< resources, said access request 
comprising a requesting networic access device description "computing environment 
information" and a plurality of service requests indicative of computer services "meeting" 
for which the network device requests provisioning (see col. 10 lines 36-41, lines 44-53, 
end user sends a request to access a meeting using a URL); 

wherein the requesting network access device description includes one or more 
of: a requesting network access device vendor, a requesting network access device 
type, a requesting network access device version (see col. 1 1 lines 28-37, the request 
includes device information such as the type of device); and 

forwarding said access request for authentication and authorization (see col. 10 
lines 56-col. 1 1 lines 3, the access request is forwarded to the server that is hosting the 
meeting). 

Pfwitzner does not explicitly teach that the access request is an authentication, 
authorization and access request. However, Amin teaches a system and method for 
generating authentication, authorization and access requests to obtain access to 
network resources (see Amin col. 14 lines 39-lines 66 and col. 18 lines 25-54). 

It would have been obvious for one of the ordinary skill in the art at the time of 
the invention to implement the use of aaa requests in Ptwitzner's system and method as 
taught by Amin. Motivation to do so comes from the knowledge well known in the art 
that using AAA requests is very widely and commonly used as admitted by the applicant 
(applicant's response pages 8-9) and that using AAA requests would authenticate the 
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identity of tlie user before granting access to networl< resources which would mal<e the 
system and method more secure. 

As to claim 18, Pfwitzner teaches a device according to Claim 13 in which the 
service requests include a request for a particular service level (see col. 14 lines 38-53, 
user may have different access levels based on whether user is author or not). 

As to claims 19, Pfwitzner teaches a system for providing access to services 
across a computer network, comprising: 

An access control server "redirector server" being arranged: 

receive an access request by a requesting network access device through which 
an end user device can obtain access to network resources, said access request 
comprising a requesting network access device description "computing environment 
information" and a plurality of service requests indicative of computer services "meeting" 
for which the network device requests provisioning (see col. 10 lines 36-41, lines 44-53, 
end user sends a request to access a meeting using a URL); 

wherein the requesting network access device description includes one or more 
of: a requesting network access device vendor, a requesting network access device 
type, a requesting network access device version (see col. 1 1 lines 28-37, the request 
includes device information such as the type of device); and 

apply a policy to the access request to determine whether the access will be 
allowed, and if so for what services (see col. 10 lines 56-col. 1 1 lines 3, the access 
request is forwarded to the server that is hosting the meeting). 
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Pfwitzner does not explicitly teach that the access request is an authentication, 
authorization and access request. However, Amin teaches a system and method for 
generating authentication, authorization and access requests to obtain access to 
network resources (see Amin col. 14 lines 39-lines 66 and col. 18 lines 25-54). 

It would have been obvious for one of the ordinary skill in the art at the time of 
the invention to implement the use of aaa requests in Ptwltzner's system and method as 
taught by Amin. Motivation to do so comes from the knowledge well known in the art 
that using AAA requests is very widely and commonly used as admitted by the applicant 
(applicant's response pages 8-9) and that using AAA requests would authenticate the 
identity of the user before granting access to network resources which would make the 
system and method more secure. 

As to claim 20, Pfwitzner teaches a device according to Claim19 in which the 
service requests include a request for a particular service level (see col. 14 lines 38-53, 
user may have different access levels based on whether user is author or not). 

As to claim 21 , Amin teaches a device according to Claim 19 in which the steps 
of receiving and applying are performed by an access-control server or an 
Authentication, Authorization and Audit (AAA) server (see col. 14 lines 38-53, 
redirection server performs authentication). 

As to claim 22, Pfwitzner teaches a system according to Claim 19 in which the 
access-control server uses the access request to select among multiple services that 
are specified for a particular device (see col. 13 lines 13-45, different versions and 
formats are selected based n the device type and user identity). 
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As to claim 23, Pfwitzner teaclies a storage medium executing code to perform 
steps, comprising tlie step of: 

generating an access request by a requesting networl< access device tlirough 
which an end user device can obtain access to networl< resources, said access request 
comprising a requesting networl< access device description "computing environment 
information" and a plurality of service requests indicative of computer services "meeting" 
for which the network device requests provisioning (see col. 10 lines 36-41, lines 44-53, 
end user sends a request to access a meeting using a URL); 

wherein the requesting networl< access device description includes one or more 
of: a requesting network access device vendor, a requesting network access device 
type, a requesting network access device version (see col. 1 1 lines 28-37, the request 
includes device information such as the type of device); and 

forwarding said access request for authentication and authorization (see col. 10 
lines 56-col. 1 1 lines 3, the access request is forwarded to the server that is hosting the 
meeting). 

Pfwitzner does not explicitly teach that the access request is an authentication, 
authorization and access request. However, Amin teaches a system and method for 
generating authentication, authorization and access requests to obtain access to 
network resources (see Amin col. 14 lines 39-lines 66 and col. 18 lines 25-54). 

It would have been obvious for one of the ordinary skill in the art at the time of 
the invention to implement the use of aaa requests in Ptwitzner's system and method as 
taught by Amin. Motivation to do so comes from the knowledge well known in the art 
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that using AAA requests is very widely and commonly used as admitted by tlie applicant 
(applicant's response pages 8-9) and that using AAA requests would authenticate the 
identity of the user before granting access to network resources which would make the 
system and method more secure. 

As to claim 27, Pfwitzner teaches a medium according to claim 23 wherein the 
requesting access device includes one or more of device type, vendor and version (see 
col. 11 lines 28-37) 

As to claim 28, Pfwitzner teaches a medium according to Claim 23 in which the 
service requests include a request for a particular service level (see col. 14 lines 38-53, 
user may have different access levels based on whether user is author or not). 

As to claim 29, Pfwitzner teaches a device according to Claim 11 or 13 
comprising a requesting network access device which controls end user device access 
to a network, and which requests services on behalf of one or more said end users (see 
col. 14 lines 38-53, redirection server performs authentication). 

As to claim 30, Pfwitzner teaches a device according to claim 11 or 13 
comprising a in which said requesting network access device requests services for its 
own use (see col. 14 lines 38-53). 

As to claims 2, 4, 12, 14, 16, 24, 26, Pfwitzner teaches a method, system, 
device and medium of providing access to services across a computer network, 
comprising the step of: generating an access request by a requesting network access 
device through which an end user device can obtain access to network resources, said 
access request comprising a requesting network access device description and a 
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plurality of service requests indicative of computer services for wliicli tlie networl< device 
requests provisioning (see col. 9 lines 28-45, col. 4 lines 20-47, col. 10 lines 38-54). 

Pfwitzner does not explicitly teach that the access request is a RADIUS access 
request. Anderson, however, teaches a system and method sending requests for 
accessing a resource wherein the request is a RADIUS request (see col. 10 lines 20- 
31). 

It would have been obvious for one of the ordinary skill in the art at the time of 
the invention to implement the use of RADIUS requests in Pfwitzner as taught by 
Anderson because doing so would make the method and system more secure. 

As to claims 3, 15, 25, Pfwitzner teaches the service request contains a device 
type and a service request identifier "URL" (see col. 13 lines 13-59, access request 
includes a URL and device information). 

Response to Arguments 

3. Applicant's arguments have been fully considered but are moot in view of the 
new grounds of rejection. 

4. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to HUSSEIN A. EL CHANTI whose telephone number is 
(571)272-3999. The examiner can normally be reached on Mon-Fri 8:30-5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ario Etienne can be reached on (571)272-4001. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding tlie status of an application may be obtained from tlie 

Patent Application Information Retrieval (PAIR) system. Status information for 

published applications may be obtained from either Private PAIR or Public PAIR. 

Status information for unpublished applications is available through Private PAIR only. 

For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 

you have questions on access to the Private PAIR system, contact the Electronic 

Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 

USPTO Customer Service Representative or access to the automated information 

system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Hussein Elchanti/ 
Patent Examiner 

August 21 , 2009 



